cd5357d1045948ba62710ad8128ae282[.]bin | Triage

Sharing

General

Target

cd5357d1045948ba62710ad8128ae282.bin
Size

2.2MB
MD5

cd5357d1045948ba62710ad8128ae282
SHA1

323e1f522f18415f8eef337a3551a736b69683d2
SHA256

6590f66d6afe155b1109e81e2c36ece73236223ab17ae1a1c77a027be9f7d400
SHA512

5483cdc770d0f40c11726b8f1ac9e37e185a61adf8411598053cf1a5f15a395abe32810b57c2c16afb784318d205b6813bfc7c6ece8462260689f740f72e3b7a
SSDEEP

49152:tDExZaVL56oRHBtip3FotVCwuRPy3k4TUI49kdz78zbkL32Mc:KOVL574Kp7abkL3Tc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd5357d1045948ba62710ad8128ae282.bin

Files

cd5357d1045948ba62710ad8128ae282.bin
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

SetupWorkStation
SetupWorkStationW
ShowState

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ